CVE-2021-20168

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface

published December 30, 2021

CVSS
—
EPSS
0%
Percentile
25.5
In the wild
Unconfirmed
What it is

Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, and execute commands as the root user. These default credentials are admin:admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.5th percentile
Published
2021-12-30T21:31Z
EPSS history
Timeline
  • 30 DEC 21:31Z
    Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface
    cvelistv5